https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:45:24.761801+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-370264 EUVD-2026-370264 2026-10-07T13:45:24.807843+00:00 EUVD-2026-370264 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86449 fkie_cve-2026-86449 2026-10-07T13:45:24.807880+00:00

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST routes, allowing unauthenticated attackers to list courses that are not published, including draft, pending, private, scheduled and trashed ones.

 https://cve.radiocsirt.org/vuln/ghsa-gwwh-q58c-5868 GHSA-gwwh-q58c-5868 2026-10-07T13:45:24.807914+00:00

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST routes, allowing unauthenticated attackers to list courses that are not published, including draft, pending, private, scheduled and trashed ones.